site
Server Details
Cyber Essentials Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
3 toolsenquiry_describeWhat you get: an ENQUIRY with a human (not a purchase, not a guaranteed quote)AInspect
Read first. States plainly what submit_enquiry does on Cyber Essentials Cost: it starts an enquiry with human providers who quote directly. Nothing is bought, ordered or paid; no quote is guaranteed; it is free. Also returns who receives the details, the consent wording, and how the person confirms.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the disclosure burden. It states that the underlying process is free, involves no purchase/order/payment, and guarantees no quote – key behavioral guarantees for an agent. It also reveals what the tool returns (recipients, consent wording, confirmation method), though it does not mention auth, rate limits, or side effects of the tool itself.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is about 70 words and front-loads the instruction 'Read first.' It is slightly redundant with the title (both mention 'not a purchase, not a guaranteed quote'), but every sentence adds some content about behavior or return value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a 0-param tool with no output schema, the description adequately covers what the tool returns (recipient details, consent wording, confirmation) and clarifies the non-transactional nature. It does not detail output format or mention sibling enquiry_fields, but for a simple informational tool this is sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description adds relevant context about the output even though there is nothing to say about parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: it 'states plainly what submit_enquiry does' and explains the enquiry outcome (human providers, no purchase, free). It explicitly differentiates from the sibling submit_enquiry by describing rather than performing the action, and the title reinforces the boundary ('not a purchase, not a guaranteed quote'). The verb 'describe' is implied by the name and the explanatory language.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening 'Read first' is an explicit when-to-use instruction, positioning this tool as the prerequisite before submit_enquiry. It does not mention when to use enquiry_fields or explicitly exclude other tools, so it stops short of full alternative routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
enquiry_fieldsThe questions the enquiry asksAInspect
Every field of the Cyber Essentials Cost enquiry: key, label, type, whether required, help text and the allowed options where there are any. Pass answers to submit_enquiry keyed by field key.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure. It describes the output content (fields and their attributes) but does not explicitly state that this is a read-only operation or that it has no side effects. However, the nature of returning field metadata strongly implies a safe query. It also does not mention potential errors, auth requirements, or response format beyond the attributes. The description adds some transparency but leaves room for assumptions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loaded with the primary purpose and then a direct usage hint. Every word earns its place—no redundancy or filler. The structure is efficient and immediately informative, making it easy for an agent to parse the tool's role.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no parameters, no output schema, and a straightforward purpose, the description is largely complete. It specifies exactly what information is returned (key, label, type, required, help text, options) and how to use it. It does not mention pagination or list structure, but given the simplicity, these are minor gaps. The description sufficiently equips an agent to call the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description adds semantic value by explaining how the returned field keys should be used ('Pass answers to submit_enquiry keyed by field key'), which clarifies the purpose of the output. Since there are no parameters to describe, the description adequately covers the interaction pattern.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: returning every field of a specific enquiry (Cyber Essentials Cost) along with their attributes. It names the resource (enquiry fields) and the verb (return/describe), and it distinguishes itself from siblings like submit_enquiry by focusing on field metadata, not submission. The mention of 'every field' and the specific attributes (key, label, type, etc.) makes the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: it tells the agent to use this tool to retrieve field definitions before passing answers to submit_enquiry. It explicitly links the output to the next step ('Pass answers to submit_enquiry keyed by field key'). While it does not explicitly state when to avoid this tool, the context implies it is a prerequisite for submission and distinct from enquiry_describe. This is sufficient guidance for typical use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
submit_enquirySubmit an ENQUIRY to human providers (two steps; not a purchase)AInspect
Submits an enquiry to Cyber Essentials Cost — NOT a purchase, NOT a guaranteed quote. Step 1: call with the answers (keyed by field key from enquiry_fields) and consent=true; it validates and returns a summary, the consent line and a confirmation token — show the person the summary and the consent line. Step 2: only if the person agrees, call again with the same answers, consent=true and the confirmation token; the enquiry is then submitted, and the person receives an email with a link they must click before any provider sees it. Consent means the person has read and agreed to: "Happy for my details to go to relevant Cyber Essentials certification bodies and consultants, who'll contact me directly."
| Name | Required | Description | Default |
|---|---|---|---|
| answers | Yes | the person's answers, keyed by field key | |
| consent | Yes | true only when the person has agreed to: Happy for my details to go to relevant Cyber Essentials certification bodies and consultants, who'll contact me directly. | |
| confirmation | No | the confirmation token from step 1, after the person has approved the summary |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure, and it does so thoroughly. It explains that the first call only validates and returns a summary/consent/token, that the second call actually submits, and that a person must click an emailed link before any provider sees the enquiry. It also discloses the exact consent text and clarifies non-binding status.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately detailed for a two-step stateful workflow and is organized with clear Step 1/Step 2 markers. It slightly repeats the consent text that already appears in the schema, but that repetition is acceptable given that the agent must show the exact consent line to the user.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and no annotations, the description provides the full call sequence, the required state to carry over between calls, the return values of step 1, and the post-submission email-link behavior. An agent has enough context to invoke the tool correctly and manage the human approval step.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3, but the description adds meaningful semantics beyond the schema: answers must be keyed by field keys from enquiry_fields, the confirmation token comes from the step-1 response, and consent must be explicitly tied to the quoted agreement text. This fully compensates for any ambiguity in the raw parameter names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Submits an enquiry to Cyber Essentials Cost') and immediately disambiguates what it is not ('NOT a purchase, NOT a guaranteed quote'). It also clearly distinguishes the two-step nature of the operation, making it easy to separate from the sibling enquiry_describe and enquiry_fields tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit, sequenced usage protocol: Step 1 call with answers and consent=true, show the summary and consent line, then Step 2 call again with the same data plus the confirmation token only after the person agrees. It also names enquiry_fields as the source for the answer keys, which helps the agent know what to do before invoking this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
- First observed
enquiry_describe - First observed
enquiry_fields - First observed
submit_enquiry
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
31Cyber Insurance Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
31Underpinning Costs: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
ISO Certification Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
31
Related MCP Servers
- AlicenseAqualityBmaintenanceUK due diligence MCP server — Companies House, corporate research, compliance checks193MIT
- FlicenseNot gradedqualityDmaintenancePaid remote MCP server for agent data-access boundary reviews, permission scope evidence, sensitive data notes, and governance receipts.-

CodexRun Ledger MCPofficial
FlicenseNot gradedqualityDmaintenancePaid remote MCP for generating trustworthy code run receipts, scope summaries, missing evidence checks, and client handoff exports.-- AlicenseNot gradedqualityBmaintenanceTurn Claude into an ISO 27001 compliance assistant — controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.164MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool has a clearly distinct role: enquiry_describe explains the process, enquiry_fields provides the input schema, and submit_enquiry performs the submission. An agent can easily select the right tool for the job without confusion.
Tool names are readable and mostly follow a noun_verb or verb_noun pattern, with enquiry_ prefix on two tools and submit_enquiry using the reverse order. This is a minor inconsistency that does not harm usability.
Three tools is exactly right for this narrow server purpose: describing the process, exposing the schema, and submitting the enquiry. No redundant tools exist.
The tool surface fully covers the enquiry lifecycle for this server, including context, field discovery, validation, consent, and two-step submission. There are no obvious missing operations for the stated purpose.